It is the point where your staff connect to company systems from networks your organization cannot verify or control. Home broadband, hotel Wi-Fi, a serviced office’s shared connection, a client’s guest network.

You can secure the device and you can secure the application. The network in between is usually somebody else’s, running equipment nobody has checked.